Tag: ai
-
NVIDIA and Lakera AI Propose Unified Framework for Agent Safety
NVIDIA and Lakera AI have introduced a groundbreaking unified security and safety framework designed to address the emerging challenges posed by autonomous AI agents in enterprise environments. This collaborative effort represents a significant step forward in making agentic systems AI systems capable of independent planning, tool use, and multi-step task execution safer and more secure…
-
KI schafft neue Sicherheitsrisiken für OT-Netzwerke
Sicherheitsbehörden sehen in der vermehrten Nutzung von KI eine Gefahr für die Sicherheit von OT-Systemen.Die Sicherheit der Betriebstechnik (Operational Technology OT) in kritischen Infrastrukturen ist seit Jahren ein immer wiederkehrendes Thema. Nach Ansicht von Sicherheitsorganisationen könnte die vermehrte Nutzung von KI in der OT die Lage noch verschlimmern.Die US-Cybersicherheitsbehörde CISA hat deshalb vor kurzem gemeinsam…
-
UK moves to strengthen undersea cable defenses as Russian snooping ramps up
Atlantic Bastion combines AI systems with warships to counter increased surveillance First seen on theregister.com Jump to article: www.theregister.com/2025/12/08/uk_subsea_cables_defense/
-
UK intelligence warns AI ‘prompt injection’ attacks might never go away
A top technologist at the U.K.’s National Cyber Security Centre said “there’s a good chance” that prompt injection attacks against AI will never be eliminated, and he warned of the related risks of embedding generative AI into digital systems globally. First seen on therecord.media Jump to article: therecord.media/prompt-injection-attacks-uk-intelligence-warning
-
UK intelligence warns AI ‘prompt injection’ attacks might never go away
A top technologist at the U.K.’s National Cyber Security Centre said “there’s a good chance” that prompt injection attacks against AI will never be eliminated, and he warned of the related risks of embedding generative AI into digital systems globally. First seen on therecord.media Jump to article: therecord.media/prompt-injection-attacks-uk-intelligence-warning
-
KnowBe4 als führendes Unternehmen im Gartner-Magic-Quadrant für ESicherheit ausgezeichnet
KnowBe4, Anbieter der bekannten Plattform, die sich umfassend mit KI und Human-Risk-Management befasst, wurde zum zweiten Mal in Folge als führendes Unternehmen im Gartner-Magic-Quadrant für E-Mail-Sicherheitsplattformen 2025 ausgezeichnet. KnowBe4 wurde für seine Umsetzungsstärke und seine umfassende Vision gewürdigt. Wir glauben, dass die Anerkennung von KnowBe4 als führendes Unternehmen im Gartner-Magic-Quadrant die folgenden Stärken von KnowBe4-Cloud-Email-Security widerspiegelt:…
-
Schwachstelle in OpenAI-Codex-CLI ermöglicht kritische Remote-Code-Execution
Die Sicherheitsforscher von Check Point Research (CPR), der IT-Forensik von Check Point Software Technologies, haben eine schwerwiegende Schwachstelle in OpenAI-Codex-CLI entdeckt. Dabei handelt es sich um das Command-Line-Tool von OpenAI, das KI-gestützte Programmierfunktionen direkt in Entwickler-Workflows integriert. Die Schwachstelle ermöglichte Remote-Code-Execution (RCE) allein durch das Öffnen eines manipulierten Projektordners und ohne Interaktion oder Zustimmung des…
-
KI-gestützte Angriffsmethoden, Risk-Operations sowie neue Anforderungen kommen auf die Security-Teams in 2026 zu
Qualys veröffentlicht seine zentralen Predictions für das Jahr 2026. Die Analysen der Qualys-Threat-Research-Unit (TRU) und führender Qualys-Expertinnen und -Experten zeigen: Unternehmen müssen im kommenden Jahr mit deutlich schnelleren Angriffsketten, wachsender Komplexität im KI-Einsatz und einem klaren Paradigmenwechsel in der operativen Sicherheitssteuerung rechnen. Attack-Path-Modeling wird 2026 erstmals voll nutzbar April Lenhard, Principal Product Manager bei Qualys,…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Digitale Vertrauensrealität 2026: Wie KI, Quanten und Automatisierung das Sicherheitsfundament neu definieren
Das Vertrauen der Zukunft steckt tief in der Hardware, der Firmware und den kryptografischen Lebenszyklen. Maschinenvertrauen wird damit nicht nur ein Technologiethema, sondern das Fundament globaler digitaler Vernetzung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitale-vertrauensrealitaet-2026-wie-ki-quanten-und-automatisierung-das-sicherheitsfundament-neu-definieren/a43084/
-
Erhebliches Sicherheitsrisiko: Analysten raten dringend von KI-Browsern ab
KI-Browser wie ChatGPT Atlas haben in einer sicheren IT-Umgebung nichts zu suchen, sagen Analysten von Gartner. Dafür gibt es mehrere gute Gründe. First seen on golem.de Jump to article: www.golem.de/news/erhebliches-sicherheitsrisiko-analysten-raten-dringend-von-ki-browsern-ab-2512-203000.html
-
CISA Releases New AIOT Security Guidance: Key Principles Risks
CISA and global partners issue new guidance for secure AI integration in operational technology, highlighting risks, governance, behavioral analytics, and OT safety. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/cisa-releases-new-ai-in-ot-security-guidance-key-principles-risks/
-
Offensive security takes center stage in the AI era
Tags: ai, attack, automation, business, ciso, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, framework, hacker, hacking, incident response, intelligence, malicious, offense, phishing, RedTeam, regulation, risk, skills, software, strategy, tactics, technology, threat, tool, vulnerability, vulnerability-management, windowsRed teaming, where ethical hackers simulate real-world attacks to test detection and response capabilities. Red teams aim to emulate threat actors by using stealthy tactics to bypass controls and achieve objectives such as data exfiltration or privilege escalation.Adversary emulation, where security pros re-create known threat actor tactics, techniques, and procedures (TTPs) based on threat intelligence…
-
Gartner warnt: Blockt aus Sicherheitsgründen alle KI-Browser auf absehbare Zeit
Analysten der Unternehmensberatung Gartner haben letzte Woche eine für mich überraschende, aber folgerichtige Empfehlung ausgesprochen. Unternehmen sollten bis auf weiteres die sogenannten KI-Browser aus Sicherheitsgründen blockieren, da die Risiken zu hoch seien. Nur wer sicherstellen kann, dass KI-Browser keinerlei Sicherheitsrisiko … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/12/08/gartner-warnt-blockt-aus-sicherheitsgruenden-alle-ki-browser-auf-absehbare-zeit/
-
NVIDIA research shows how agentic AI fails under attack
Enterprises are rushing to deploy agentic systems that plan, use tools, and make decisions with less human guidance than earlier AI models. This new class of systems also … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/08/nvidia-agentic-ai-security-framework/
-
CISA Releases New AIOT Security Guidance: Key Principles Risks
CISA and global partners issue new guidance for secure AI integration in operational technology, highlighting risks, governance, behavioral analytics, and OT safety. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/cisa-releases-new-ai-in-ot-security-guidance-key-principles-risks/
-
Offensive security takes center stage in the AI era
Tags: ai, attack, automation, business, ciso, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, framework, hacker, hacking, incident response, intelligence, malicious, offense, phishing, RedTeam, regulation, risk, skills, software, strategy, tactics, technology, threat, tool, vulnerability, vulnerability-management, windowsRed teaming, where ethical hackers simulate real-world attacks to test detection and response capabilities. Red teams aim to emulate threat actors by using stealthy tactics to bypass controls and achieve objectives such as data exfiltration or privilege escalation.Adversary emulation, where security pros re-create known threat actor tactics, techniques, and procedures (TTPs) based on threat intelligence…
-
Vaillant CISO: NIS2 complexity and lack of clarity endanger its mission
Tags: ai, attack, awareness, business, ciso, compliance, corporate, country, cyber, cyberattack, cybersecurity, dora, email, germany, infrastructure, intelligence, network, nis-2, office, organized, phishing, ransomware, regulation, risk, service, skills, supply-chain, threat, trainingCSO Germany: The energy sector is increasingly becoming a target for cybercriminals. Experts and the Federal Office for Information Security (BSI) believe that protection in this area must be significantly increased. How do you assess the current situation?Reiß: The geopolitical tensions we are currently witnessing are leading to an increased threat level. This naturally also affects the heating…
-
Critical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude, and Other AI Tools Affect Millions
A groundbreaking security research project has uncovered a new class of vulnerabilities affecting virtually every major AI-powered integrated development environment (IDE) and coding assistant on the market. Dubbed >>IDEsaster,
-
Critical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude, and Other AI Tools Affect Millions
A groundbreaking security research project has uncovered a new class of vulnerabilities affecting virtually every major AI-powered integrated development environment (IDE) and coding assistant on the market. Dubbed >>IDEsaster,
-
Block all AI browsers for the foreseeable future: Gartner
Analysts worry lazy users could have agents complete mandatory infosec training, and attackers could do far nastier things First seen on theregister.com Jump to article: www.theregister.com/2025/12/08/gartner_recommends_ai_browser_ban/
-
Microsoft appears to move on from its most loyal ‘customers’ Contoso and Fabrikam
Outfit called ‘Zava’ selling ‘intelligent athletic apparel’ is now in the spotlight as Redmond’s fake brand for the AI age First seen on theregister.com Jump to article: www.theregister.com/2025/12/01/microsoft_contoso_fabrikam_zava/
-
Qualys blickt ins Jahr 2026: KI-Angriffe, Risk Operations und neue Sicherheitsanforderungen
2026 wird für Security-Teams ein Jahr, in dem Risiko-Priorisierung, Transparenz und Kontext entscheidender werden als schiere Datenmengen oder Tool-Vielfalt. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/qualys-blickt-ins-jahr-2026-ki-angriffe-risk-operations-und-neue-sicherheitsanforderungen/a43080/
-
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Tags: ai, attack, data, flaw, injection, intelligence, rce, remote-code-execution, theft, tool, vulnerabilityOver 30 security vulnerabilities have been disclosed in various artificial intelligence (AI)-powered Integrated Development Environments (IDEs) that combine prompt injection primitives with legitimate features to achieve data exfiltration and remote code execution.The security shortcomings have been collectively named IDEsaster by security researcher Ari Marzouk (MaccariTA). They affect popular First seen on thehackernews.com Jump to article:…
-
Prüfbare KI-Qualität: MISSION KI präsentiert Qualitätsstandard und digitales Prüfportal für Niedrigrisiko-KI
Tags: aiDer VDE hat sich an dem Projekt MISSION KI Nationale Initiative für Künstliche Intelligenz und Datenökonomie beteiligt. Entstanden sind ein Qualitätsstandard und ein Portal für die strukturierte Bewertung der Qualität von KI-Systemen, die sich unterhalb der Hochrisikoschwelle befinden. Die Partner des Projekts MISSION KI Nationale Initiative für Künstliche Intelligenz und Datenökonomie haben… First seen on…
-
Warning: React2Shell vulnerability already being exploited by threat actors
Tags: ai, application-security, attack, china, cloud, communications, credentials, data, data-breach, exploit, firewall, framework, group, infosec, intelligence, linux, malicious, malware, open-source, service, software, threat, tool, update, vulnerability, wafSystem.Management.Automation.AmsiUtils.amsiInitFailed = true (a standard AMSI bypass), and iex executes the next stage.JFrog’s security research team also today reported finding a working proof of concept that leads to code execution, and they and others have also reported finding fake PoCs containing malicious code on GitHub. “Security teams must verify sources before testing [these PoCs],” warns JFrog.Amitai Cohen, attack…
-
AWS AI IDE, AgentCore throw down gauntlets for Microsoft
Kiro emerges as a significant alternative to GitHub Copilot agents, while AWS AgentCore updates square off against Agent 365 in the battle for enterprise AI development. First seen on techtarget.com Jump to article: www.techtarget.com/searchsoftwarequality/news/366635669/AWS-AI-IDE-AgentCore-throw-down-gauntlets-for-Microsoft
-
Rethinking the CIO-CISO Dynamic in the Age of AI
Enterprises Are Reimagining Org Roles, Risk Management and Skillsets in the AI Race. Organizations are beginning to reimagine how leadership roles should be structured, aligned and empowered as they grapple with regulatory pressures, the unpredictable nature of AI systems, and the need for operational resilience in an increasingly uncertain business climate. First seen on govinfosecurity.com…